Privacy Policy

This Privacy Policy explains how Go Millie LLC ("Go Millie," "Millie," "we," "us," or "our") collects, uses, and protects information in connection with the Millie application and related services available at gomillie.ai (the "Service").

1. Who we are

Go Millie LLC is the data controller responsible for your information under this Policy. Millie is an AI assistant for mortgage professionals that helps loan officers monitor email, review mortgage-related documents, and organize loan activity. You can reach us at [email protected].

2. Information we collect

We collect the following categories of information:

• Account information. When you sign in, we receive your name, email address, profile image, and a unique account identifier from your authentication provider (Google and/or our identity provider, Clerk).
• Google account data. If you connect a Google account, we access data from Google APIs as described in Section 4, subject to the permissions (scopes) you grant during the consent flow.
• Email and document content. When you connect a mailbox, we process the contents of relevant emails and their attachments (including mortgage documents) so the Service can extract, summarize, and organize information for you.
• Usage data. We collect technical and usage information such as log data, device and browser information, IP address, and actions taken within the Service.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate you and secure your account;
• Read, parse, classify, and summarize emails and documents to surface relevant loan activity and draft suggested responses;
• Improve the reliability and performance of the Service and diagnose problems;
• Communicate with you about the Service; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your email or document content to train generalized AI/ML models.

4. Google user data and Limited Use

Millie's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the Google data needed to provide and improve user-facing features of the Service.
• We use Google user data solely to provide and improve those features.
• We do not transfer Google user data to others except as necessary to provide and improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with your consent.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read your Google data unless: (i) you have given us specific consent; (ii) it is necessary for security purposes (such as investigating abuse); (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized.

5. AI processing and service providers

To deliver the Service, email and document content may be processed by trusted third-party providers acting on our behalf ("subprocessors"), including:

• Anthropic — large language model processing for extraction, classification, and drafting;
• Clerk — authentication and user management;
• Google — email and account access via Google APIs;
• Neon — managed database hosting;
• Railway — application hosting;
• Cloudflare — content delivery and network security; and
• Resend — transactional and announcement email.

These providers are permitted to use your information only to perform services for us and are bound by obligations consistent with this Policy.

6. How we share information

We share information only: (i) with the service providers described above; (ii) when required by law, legal process, or to protect the rights, property, or safety of Go Millie, our users, or others; and (iii) in connection with a merger, acquisition, or sale of assets, subject to the protections in this Policy. We do not sell or rent personal information.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time (see Section 9).

8. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, encryption of sensitive credentials at rest, scoped access controls, and isolation of customer data by organization. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may:

• Disconnect a connected Google account at any time from within the Service or from your Google Account permissions page;
• Request access to, correction of, or deletion of your personal information; and
• Request that we delete your account and associated email and document data.

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe consistent with applicable law.

10. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update constitutes acceptance of the revised Policy.

12. Contact us

If you have questions about this Policy or our privacy practices, contact us at [email protected].